Live on Robinhood Chain

Your stocks,
with a spare key.

Keep your tokenized stocks in a Safe only your wallet can move. Lose that wallet, and the people you trust hand the bothy to your new one — after seven days you can stop.

  • Safe 1.4.1
  • Recovery by CANDIDE
  • 7 days to say no
  • $0 to Bothy

Plan your spare key

What would happen, dated from Robinhood Chain's own clock
Live
Keyholders 3 people
Must agree 2 of 3
To take it, a thief needs—
If you lose your wallet—
Keyholders can move your sharesnever
Building it costsone transaction

If your keyholders agreed on a new wallet right now, this is the week that would follow. Any day inside it, one transaction from your wallet stops everything.

Build a bothy like this →
How it works

A shelter with a spare key

A bothy is a Safe smart account that belongs to your wallet, with a recovery module switched on and a few people you trust named as keyholders. Day to day it is just yours.

01

Build it

Name two to five keyholders — family, friends, your own second wallet — and how many must agree. One transaction builds the Safe, switches recovery on and records them.

02

Fill it

Move in stocks you already hold, or buy any of 42 tokenized stocks with dollars and have Uniswap deliver them straight into the bothy.

03

Live in it

Buy, sell and send from the bothy with your usual wallet, one click each. Your keyholders cannot move a single share — they only hold the spare key.

04

Lose a key, keep the house

Lost your phone or seed phrase? Enough keyholders agree on your new wallet, seven days pass, and the bothy is yours again — everything inside it untouched.

The seven days

Nobody takes it quietly

A handover is never instant. When enough keyholders agree, a clock starts on chain — and for seven days the wallet that owns the bothy can cancel it with one transaction.

7 days: your wallet can cancel Day 02 of 3 agreeon a new wallet Day 3you notice, andcancel — it ends Day 7if nobody cancelled,anyone can finish it You still own it and can act all week. Trade, send, cancel: nothing is frozen while the clock runs.
Agreement is not enoughKeyholders agreeing starts the clock, nothing more. They cannot touch a share, before or after.
You can always say noIf it wasn't you who asked, cancel from your wallet. The agreement they gave is voided with it and cannot be reused.
After seven days, it finishesAnyone may send the last transaction. The new wallet becomes the only owner; the same keyholders keep guarding it.
It is written in the contractThe seven days are fixed in CANDIDE's module on Robinhood Chain. Nobody — not us, not them — can shorten them.
Who holds a key

Choose people, not a company

Your keyholders are ordinary wallets. They never pay, never hold anything, and only act if you ask them to — or if you can't.

Most people
2 of 3

Three people you trust, any two of whom can act. One can lose their own key, or be away, and you are still covered.

A family
2 of 4

A partner, a sibling, a grown child, an old friend. The same path hands the bothy to your heir if you are gone: they name the heir's wallet.

Just you
1 of 1 your spare

A second wallet of your own — a hardware wallet in a drawer. It is your own spare key, and the seven days still protect you if it is stolen.

Safety

Nothing to trust but audited code

Bothy is a page, not a bank. Every transaction goes to contracts that were already on Robinhood Chain, written and audited by the people who built them.

Safe holds it

Your bothy is a Safe 1.4.1 account — the same code that secures billions on other chains, byte-for-byte identical here. It is standard: you can open it in Safe{Wallet} too.

CANDIDE's module

The spare key is CANDIDE's Social Recovery Module 0.0.1 — the version Ackee Blockchain audited — with the seven days built into its code. 22 accounts on Robinhood Chain already use it.

No contract of ours

There is nothing of Bothy's on chain to pause, upgrade or drain, and no fee. If this website vanished, your bothy would still be yours, in any Safe app.

Keyholders can't spend

A keyholder can agree to a new owner. That is all: Safe itself refuses them any transaction, and the module refuses them any change to its settings.

Trades with a floor

Every trade from your bothy names the least it will accept, and Uniswap refuses to fill below it. Approvals are for exactly the amount, never unlimited.

Tested on the live chain

The code that builds your transactions builds real bothies on a private copy of Robinhood Chain, trades in them, and hands them over after exactly seven days: 11/11 properties, 259 checks. The results.

Questions

Good to know

What if a keyholder turns against me?

Alone, they can only agree; nothing happens until as many keyholders as you chose agree on the same new wallet. If they do, a seven-day clock starts and your wallet can cancel it. Bothy shows a warning on your bothy the moment one is running. Then remove that keyholder.

What if I lose my wallet?

Set up a new wallet, open "I lost my key" and make a request link naming your bothy and your new wallet. Send it to your keyholders. When enough have agreed, the seven days start; after them, anyone can finish and the new wallet owns the bothy, with everything in it.

And if I die?

The same path hands the bothy to your heir. Tell your keyholders who it should go to; they name the heir's wallet, and seven days later it is theirs. One detail: the new owner cannot be one of the keyholders' own wallets, so an heir who is also a keyholder uses a second account.

I'm away for a week. Could they take it while I'm gone?

Only if enough of them agree, which is why you choose people you trust and more than one of them. If you'll be out of reach for long, raise how many must agree before you go. The seven days are a warning, not a vault door.

What does it cost?

Bothy charges nothing. Building a bothy is one transaction (about 450,000 gas, a fraction of a cent on Robinhood Chain). Trades pay Uniswap's pool fee, as anywhere.

Can I use my bothy without this website?

Yes. It is a standard Safe 1.4.1 account, and Safe{Wallet} supports Robinhood Chain. The recovery settings live in CANDIDE's module, which any tool can read. Bothy is a convenient front door, not the only one.

Is it audited?

Bothy deploys no contract, so there is nothing of ours to audit. Safe 1.4.1 is audited, and CANDIDE's Social Recovery Module 0.0.1 was audited by Ackee Blockchain at exactly the version deployed here, and the page that builds your transactions is open and tested against the live chain.